Vendor dossier / #8
Ivanti vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 38 Ivanti vulnerabilities as of catalog 2026.10.30, 2.2% of all 1,766 entries and rank 8 of 291 vendors. The first was added on 2021-11-03 and the most recent on 2026-10-30; 12 are flagged as used in ransomware campaigns.
- KEV entries
- 382.2% of catalog
- Last 90 days
- +3added
- Ransomware: known
- 1231.6%
- Products
- 16distinct
- First added
- 2021-11-03
- Latest added
- 2026-10-30
- Median days to due
- 21
- Open deadlines
- 2federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 9 |
| 2022 | 0 |
| 2023 | 3 |
| 2024 | 11 |
| 2025 | 7 |
| 2026 | 8 |
QCommon questions
How many Ivanti vulnerabilities are in CISA KEV?
38, as of KEV catalog 2026.10.30 (released 2026-10-30). That is 2.2% of the catalog.
Which Ivanti product has the most KEV entries?
Endpoint Manager Mobile (EPMM), with 7 entries. 16 products appear in total.
How many Ivanti KEV vulnerabilities are linked to ransomware?
12 of 38 (31.6%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Ivanti vulnerability added to KEV?
2026-10-30 (CVE-2026-118527).
What is the most common weakness in Ivanti KEV entries?
CWE-94 (Code injection), listed on 7 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| Endpoint Manager Mobile (EPMM) | 7 | 18.4% |
| Pulse Connect Secure | 7 | 18.4% |
| Endpoint Manager (EPM) | 4 | 10.5% |
| Connect Secure | 3 | 7.9% |
| Cloud Services Appliance (CSA) | 3 | 7.9% |
| Sentry | 2 | 5.3% |
| Connect Secure, Policy Secure, and ZTA Gateways | 2 | 5.3% |
| Connect Secure and Policy Secure | 2 | 5.3% |
| Endpoint Manager (EPM) | 1 | 2.6% |
| Virtual Traffic Manager | 1 | 2.6% |
| Cloud Services Appliance | 1 | 2.6% |
| Endpoint Manager Cloud Service Appliance (EPM CSA) | 1 | 2.6% |
| Connect Secure, Policy Secure, and Neurons | 1 | 2.6% |
| Endpoint Manager Mobile (EPMM) and MobileIron Core | 1 | 2.6% |
| MobileIron Multiple Products | 1 | 2.6% |
| Pulse Connect Secure and Pulse Policy Secure | 1 | 2.6% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-94 Code injection | 7 | 18.4% |
| CWE-287 Improper authentication | 5 | 13.2% |
| CWE-78 OS command injection | 3 | 7.9% |
| CWE-36 | 3 | 7.9% |
| CWE-77 Command injection | 3 | 7.9% |
| CWE-22 Path traversal | 3 | 7.9% |
| CWE-288 Authentication bypass via alternate path | 2 | 5.3% |
| CWE-121 Stack-based buffer overflow | 2 | 5.3% |
| CWE-89 SQL injection | 2 | 5.3% |
| CWE-340 | 1 | 2.6% |
| CWE-306 Missing authentication | 1 | 2.6% |
| CWE-862 Missing authorization | 1 | 2.6% |
EAll 38 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-118527 | Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | New | Open | Unknown | CWE-340 |
| CVE-2026-111357 | Connect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | New | Open | Unknown | CWE-306, CWE-862, CWE-345 |
| CVE-2026-104935 | Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | Unknown | CWE-290 | ||
| CVE-2026-10520 | Sentry | Ivanti Sentry OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2026-1603 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | Unknown | CWE-288 | ||
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Unknown | CWE-288 | ||
| CVE-2025-22457 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Known | CWE-121 | ||
| CVE-2024-13161 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2024-13160 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2024-13159 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2025-0282 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Known | CWE-121 | ||
| CVE-2024-9380 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | Unknown | CWE-77 | ||
| CVE-2024-9379 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2024-29824 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2024-7593 | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Unknown | CWE-287, CWE-303 | ||
| CVE-2024-8963 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2024-8190 | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2021-44529 | Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Known | CWE-94 | ||
| CVE-2024-21893 | Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | Known | CWE-918 | ||
| CVE-2023-35082 | Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2024-21887 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Known | CWE-77 | ||
| CVE-2023-46805 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2023-38035 | Sentry | Ivanti Sentry Authentication Bypass Vulnerability | Known | CWE-863 | ||
| CVE-2023-35081 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2023-35078 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2021-22900 | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Unknown | CWE-94 | ||
| CVE-2021-22899 | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | Unknown | CWE-77 | ||
| CVE-2021-22894 | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Unknown | CWE-94 | ||
| CVE-2021-22893 | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Known | CWE-287 | ||
| CVE-2020-8260 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | Unknown | CWE-434 | ||
| CVE-2020-8243 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | Unknown | CWE-94 | ||
| CVE-2020-15505 | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Unknown | CWE-706 | ||
| CVE-2019-11539 | Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Known | CWE-78 | ||
| CVE-2019-11510 | Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Known | CWE-22 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 38 Ivanti vulnerabilities (2.2% of all entries). Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/vendors/ivanti/
Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30. Vendor names are CISA's vendorProject strings; KEV Now states no facts about Ivanti beyond this data.